# Initia Says Cloud Key Breach Moved $3.27 Million in Assets

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/53678
Published: 2026-11-11T07:34:30.000Z
Updated: 2026-11-11T07:34:30.000Z
Section: Technology

> About $2.16 million remains on the halted network. Initia has not announced a restart date.

Initia said an attacker moved about $3.27 million in assets after a cloud key breach, prompting a network halt that left about $2.16 million of those funds frozen.

A compromised Google Cloud Platform key was involved in the Nov. 9 command-injection intrusion into Initia’s systems. The intrusion exposed environment variables and opened access to Initia’s GitHub and cloud accounts, further credentials and Anvil, its rollup-hosting platform.

The attacker then validated forged Inter-Blockchain Communication withdrawals from five rollups, releasing assets held in escrow on Initia’s layer-1 network. About $3.27 million moved to an attacker-controlled address, while about $2.16 million remained on the halted chain and could not be transferred.

Initia and its validators halted the network at 1:18 a.m. ET Nov. 10 (06:18 UTC) after detecting unauthorized escrow transfers. Before the halt, Initia put transfers through Noble at about $605,000 in USDC plus $10,000 in other tokens. The updated figure also includes assets still on the chain.

This is Initia’s second security incident in less than three weeks. An Oct. 23 exploit allowed an attacker to bridge out about $2.7 million in assets after a MoveVM script-caching bug bypassed security checks.

Initia is rebuilding affected infrastructure in an isolated environment and plans to restore the backing of affected assets in full. It has not announced a network restart date.